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1  Introduction 


The  goal  of  this  project  was  to  study  the  primary  design  and  implementation  issues  in  distributed 
implementation  of  hard  real-time  systems.  We  organized  the  effort  under  a  project  named  MARUTI 
and  defined  the  goal  as  the  creation  of  an  environment  for  the  development  and  deployment  of 
applications  with  hard  real-time,  fault  tolerance,  and  security  requirements,  as  are  often  found 
in  the  embedded  systems[12,  13].  Good  examples  of  such  embedded  systems  are  found  in  signal 
processing  and  avionics  applications.  Such  applications  must  be  able  to  execute  on  a  distributed, 
heterogeneous  hardware  base.  During  the  past  three  years  we  have  created  a  framework  for  such  an 
environment  and  have  demonstrated  the  feasiblty  of  the  design  through  initial  implementations  of 
the  prototype  components  of  the  MARUTI  Environment.  In  this  proposal,  we  outline  the  research 
effort  we  propose  to  undertake  over  the  next  three  years. 

The  design  of  the  MARUTI  Environment  is  motivated  by  the  requirements  of  the  next  genera¬ 
tion  of  applications.  In  the  rest  of  this  section  we  present  some  details  of  these  requirements. 


2  Project  Accomplishments 

In  order  to  address  the  problems  associated  with  the  design  and  implementation  of  an  advanced, 
hard  real-time  operating  system,  a  number  of  new  techniques  have  to  be  developed.  Our  approach 
has  been  to  take  a  comprehensive  view  of  the  problems  and  address  them  at  the  theoretical  level 
when  necessary.  At  the  same  time  we  integrate  such  developments  in  implementations,  and  derive 
new  theoretical  challenges  from  our  experiences  in  implementing  the  system. 

In  this  section  we  present  the  results  to  date  in  theoretical  work  as  well  as  the  current  status  of 
the  implementation  of  the  MARUTI  environment. 


2.1  Theoretical  Developments 

The  development  of  a  comprehensive  framework  which  addresses  the  requirements  for  hard  real¬ 
time,  fault  tolerance,  and  distributed  heterogeneous  operation  poses  many  new  theoretical  chal¬ 
lenges.  During  the  past  three  years,  we  have  been  addressing  several  such  problems.  In  the 
following  we  discuss  some  of  our  achievements  which  are  contributions  to  the  state  of  the  art  in 
their  own  right.  Clearly  they  have  had  a  major  impact  on  the  design  and  implementations  we  have 
undertaken. 

The  primary  paradigm  in  the  design  of  the  MARUTI  environment  is  that  of  time-driven  compu¬ 
tations.  Development  of  such  an  environment  required  a  re-examination  of  the  basic  assumptions 
and  approaches,  as  the  generalization  of  current  practices  were  not  applicable.  A  comprehensive 
description  of  our  approach  has  been  presented  in  the  book[2j. 

2.2  Resource  Allocation 


Clearly  the  resource  management  problem  is  at  the  heart  of  a  successful  implementation  of  a  real¬ 
time  operating  system  in  a  distributed  environment.  Our  studies  of  the  issues  involved  resulted  in 
our  separating  the  resource  management  problem  into  two  phases,  resource  allocation  and  schedul¬ 
ing.  In  our  design,  an  allocator  decides  where  tasks  and  subtasks  are  to  execute.  The  actual  local 
scheduling  of  a  resource  is  carried  out  in  the  second  phase  [2].  _ 
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In  conjunction  with  the  allocation  of  resources,  we  have  developed  the  concept  of  resource 
verification,  which  is  carried  out  to  ascertain  that  the  scheduling  constraints  will  be  met.  In  this 
way  the  allocation  process  carrier  out  its  primary  function  of  assigning  tasks  to  various  nodes, 
taking  into  consideration  the  timing  constraints.  We  have  studied  policy  issues  related  to  the 
resource  allocation[10]. 

2.3  Real-Time  Scheduling 

The  system  maintains  a  calendar  for  each  resource.  If  a  task’s  request  for  a  resource  can  be  satisfied, 
a  reservation  i6  made  in  the  calendar.  At  run  time,  resources  are  allocated  to  tasks  according  to 
the  reservations  in  the  calendar. 

In[14],  we  present  a  new  technique  for  scheduling:  decomposition  schedtiling.  All  the  requests 
are  decomposed  into  a  sequence  of  subsets.  Each  request  is  in  one  and  only  one  subset.  The 
requests  in  an  earlier  subset  of  the  sequence  are  scheduled  before  the  requests  in  a  later  subset. 
Thsks  within  each  subset  are  scheduled  using  an  approach  called  super-sequence  scheduling  16, 15]. 

In  determining  the  task  schedules  and  constructing  the  subsets,  we  take  into  account  the  rela¬ 
tionships  which  exist  among  the  time  constraints  of  tasks.  We  have  defined  leading  and  strongly- 
leading  relations,  and  carry  out  the  decomposition  based  on  these  relations. 

The  results  to  date  indicate  that  this  scheduling  approach  guarantees  the  generation  of  a  feasible 
schedule  if  one  exists[3].  At  the  same  time  it  has  relatively  modest  computation  requirements. 

2.4  E^iult  Tolerance 

The  MARUTI  system  has  been  built  as  a  fault  tolerant,  distributed  system.  To  achieve  the  fault 
tolerance  objective,  processors  in  the  system  are  divided  into  partitions.  A  real-time  task  can  be 
executed  in  different  partitions  of  processors  at  the  same  time.  The  allocation  of  tasks  to  partitions 
is  dynamically  determined  according  to  system  parameters,  and  according  to  how  many  faults  the 
application  must  tolerate.  The  resource  allocators  in  different  sites  exchange  replica  information 
to  ensure  correct  message  delivery  to  all  replicas.  A  theoretical  model  of  this  scheme  has  been 
presented  in[2]. 

The  fault  tolerance  scheme  follows  a  fork-join  paradigm.  A  message-sending  task  sends  its 
output  message  to  all  the  replicated  message-receiving  tasks.  The  fork  part  of  the  task  takes  care 
of  the  multiple  message  sending,  and  is  transparent  to  the  user.  Each  receiving  task  has  a  user- 
transparent  join  part,  which  selects  the  correct  message,  based  on  time  and  syntax,  and  gives  it 
directly  to  the  message-receiving  task.  We  have  shown  that  this  paradigm  is  applicable  to  handling 
user-definable  resiliency  requirements  on  an  application  by  application  basis[5].  In  addition  it  gives 
flexibility  in  that  a  different  degree  of  resiliency  may  be  specified  for  different  parts  of  a  computation 
graph.  The  approach  permits  the  construction  of  a  resilient  computation  graph,  which  is  capable 
of  restoring  the  degree  of  resiliency  after  a  transient  failure[5,  6]. 

2.5  Programming  Language  Support 

The  time-driven  approach  requires  the  scheduler  to  know  the  resource  requirements,  time  con¬ 
straints,  and  execution  time  of  each  application.  Communication,  precedence  and  synchroniza¬ 
tion  among  processes  affect  the  time  constraints  of  applications,  and  must  be  taken  into  account 
while  scheduling.  Since  these  constraints  and  requirements  are  application-specific,  they  need  to 
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be  derived  from  application  programs.  Therefore,  the  programming  language  has  to  provide  the 
programmer  with  features  to  express  them. 

MPL  (MAi2t/T/ProgrammingLanguage)[8,  7]  is  based  on  an  object-oriented  paradigm[9).  MPL 
objects  com  mu  pi  cate  with  each  other  using  both  one-way  method  invocations  or  remote  procedure 
calls.  It  provides  exception  handling  including  timing  errors.  It  provides  features  to  express  time 
constraints  on  invocations  and  precedence  relations  among  them.  This  information  is  used  for  pre- 
scheduling.  MPL  provides  separate  type  hierarchy  and  inheritance  hierarchy.  It  is  possible  to  have 
multiple  implementations  for  a  given  object  specification.  The  MPL  objects  provide  intra-object 
as  well  as  inter-object  concurrency.  It  is  also  possible  to  express  that  certain  actions  have  to  occur 
in  parallel  or  simultaneously.  The  synchronization  mechanism  is  also  designed  to  facilitate  pre- 
scheduling.  The  language  supports  fault  tolerance  using  strong  typing,  using  exception  handling, 
and  creating  object  groups.  An  object  group  is  a  mechanism  to  address,  communicate,  and  control 
a  number  of  cooperating  objects. 

Apart  from  translation,  the  MPL  compiler  extracts  the  temporal  and  synchronization  con¬ 
straints  of  objects.  These  are  later  used  by  the  scheduler  to  create  a  calendar. 

2.6  Implementation 

MARUTI  is  built  as  a  modular  system  and  it  allows  the  design,  analysis  and  verification  of  prop¬ 
erties  of  user  applications  executable  in  the  system.  It  is  also  designed  to  be  deterministic  and 
predictable.  The  implementation  is  carried  out  according  to  these  design  goals[4,  11]. 

MARUTI  has  been  demonstrated  as  a  distributed,  real-time,  fault  tolerant  system  in  a  hetero¬ 
geneous  environment.  In  MARUTI  real-time  tasks  and  system  services  are  distributed  among  a  set 
of  processors.  As  a  result,  it  is  not  necessary  to  keep  a  copy  of  each  service  in  each  processor.  The 
local  allocator  dynamically  decides  to  invoke  a  service  on  any  machine.  Furthermore  when  a  local 
service  cannot  meet  all  the  local  requests,  that  is,  the  service  cannot  meet  its  deadline  for  every 
request  from  the  local  tasks,  it  invokes  the  same  service  on  a  remote  machine.  The  remote  service 
coordination  is  carried  out  by  the  allocators  in  local  and  remote  processors,  through  a  process  of 
negotiation. 

The  MARUTI  system  is  designed  as  a  fault  tolerant  system.  We  divide  processors  into  several 
partitions,  such  that  no  fault  propagation  can  take  place  from  one  partition  to  another.  One  copy 
of  a  real-time  application  is  only  run  within  one  partition.  For  the  fault  tolerant  purpose,  multiple 
copies  of  an  application  may  run  at  the  same  time  in  different  partitions.  We  have  implemented 
the  fork-join  mechanism  discussed  above  to  provide  the  fault  tolerance  function. 

The  MARUTI  system  is  designed  as  a  heterogeneous  system.  It  is  implemented  on  different 
machines,  including  Sun-3,  SparcStations,  and  DECStations.  Since  different  machines  have  different 
formats  of  number  storage,  we  are  developing  various  tools  which  can  translate  between  different 
formats  when  communication  is  needed  between  different  machines. 

The  current  implementation  of  MARUTI  runs  on  top  of  the  UNIX[1]  system.  While  UNIX  is 
not  the  most  hospitable  host  to  implement  a  time-driven  system  such  as  MARUTI ,  it  offers  a  very 
effective  system  development  environment.  Further  the  availability  of  the  UNIX  system  on  many 
platforms  makes  MARUTI  portable.  Experience  gained  in  building  MARUTI  on  top  of  UNIX  have 
been  documented  in[ll]. 
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2.7 


Tools 


The  MARUTI  environment  contains  a  set  of  tools  which  have  been  developed  to  support  the 
applications  during  all  phases  of  their  life  cycle.  The  following  tools  are  available  in  the  system  at 
present: 

•  Precompiler.  In  order  to  run  the  real-time  language  we  have  developed,  we  have  built  a 
precompiler  which  can  translate  code  from  our  language  into  C  code. 

•  Joint  Editor.  Currently,  part  of  the  information  contained  in  the  joints,  such  as  execution 
times  of  SAPs  and  their  temporal  relations  with  other  SAPs,  has  to  be  created  and  updated 
manually.  In  order  to  simplify  this  task,  an  interactive  joint  editor  is  provided.  In  the  next 
version,  most  of  this  information  will  be  created  by  the  execution  time  analyzer  and  the 
precompiler. 

•  Scheduling  Tool.  During  the  application  development  it  is  necessary  for  the  programmer  to  get 
some  idea  about  the  ability  of  the  program  to  execute  with  the  necessary  time  constraints.  In 
order  to  support  such  analysis  the  scheduling  tool  permits  a  user  to  study  the  schedulability 
of  a  set  of  tasks  on  a  set  of  system  resources.  The  task  characteristics  are  specied  as  a 
computation  graph  with  the  resource  requirements  for  each  node  of  the  graph  given  explicitly. 
The  tool  then  examines  the  feasibility  of  scheduling  the  tasks  with  the  time  constrains  and 
provides  an  analysis  of  the  resource  bottlenecks  and  the  application  program  bottlenecks.  An 
initial  version  of  this  tool  is  operational. 

•  Calendar  Display.  This  tool  presents  a  dynamic  display  of  the  current  schedule  of  tasks  to 
be  executed.  It  also  supports  a  step  by  step  controlled  execution  of  tasks.  This  tool  and  its 
displays  have  been  very  useful  in  debugging  the  demo  applications  in  that  its  use  has  become 
an  integral  part  of  MARUTI  demos. 

Since  time  is  one  of  the  most  important  factors  in  the  system,  we  have  developed  a  tool  which 
can  stop  the  MARUTI  system  timer.  The  tool  can  also  be  used  to  run  tasks  in  stepwise 
fashion.  That  is,  tasks  can  be  run  one  by  one  when  a  user  selects  a  button  on  the  screen. 

The  MARUTI  system  has  provided  us  a  platform  on  which  to  try  different  ideas  and  to  implement 
different  tools.  We  plan  to  build  more  tools,  such  as  an  automatic  task  execution  time  analyzer. 
This  would  be  run  at  compile  time,  and  would  use  the  syntax  of  the  code  to  determine  the  execution 
time  of  real-time  tasks. 
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1  Introduction 


The  goal  of  this  project  was  to  study  the  primary  design  and  implementation  issues  in  distributed 
implementation  of  hard  real-time  systems.  We  organized  the  effort  under  a  project  named  MARUTI 
and  defined  the  goal  as  the  creation  of  an  environment  for  the  development  and  deployment  of 
applications  with  hard  real-time,  fault  tolerance,  and  security  requirements,  as  are  often  found 
in  the  embedded  systems[12,  13].  Good  examples  of  such  embedded  systems  are  found  in  signal 
processing  and  avionics  applications.  Such  applications  must  be  able  to  execute  on  a  distributed, 
heterogeneous  hardware  base.  During  the  past  three  years  we  have  created  a  framework  for  such  an 
environment  and  have  demonstrated  the  feasiblty  of  the  design  through  initial  implementations  of 
the  prototype  components  of  the  MARUTI  Environment.  In  this  proposal,  we  outline  the  research 
effort  we  propose  to  undertake  over  the  next  three  years. 

The  design  of  the  MARUTI  Environment  is  motivated  by  the  requirements  of  the  next  genera¬ 
tion  of  applications.  In  the  rest  of  this  section  we  present  some  details  of  these  requirements. 

2  Project  Accomplishments 

In  order  to  address  the  problems  associated  with  the  design  and  implementation  of  an  advanced, 
hard  real-time  operating  system,  a  number  of  new  techniques  have  to  be  developed.  Our  approach 
has  been  to  take  a  comprehensive  view  of  the  problems  and  address  them  at  the  theoretical  level 
when  necessary.  At  the  same  time  we  integrate  such  developments  in  implementations,  and  derive 
new  theoretical  challenges  from  our  experiences  in  implementing  the  system. 

In  this  section  we  present  the  results  to  date  in  theoretical  work  as  well  as  the  current  status  of 
the  implementation  of  the  MARUTI  environment. 

2.1  Theoretical  Developments 

The  development  of  a  comprehensive  framework  which  addresses  the  requirements  for  hard  real¬ 
time,  fault  tolerance,  and  distributed  heterogeneous  operation  poses  many  new  theoretical  chal¬ 
lenges.  During  the  past  three  years,  we  have  been  addressing  several  such  problems.  In  the 
following  we  discuss  some  of  our  achievements  which  are  contributions  to  the  state  of  the  art  in 
their  own  right.  Clearly  they  have  had  a  major  impact  on  the  design  and  implementations  we  have 
undertaken. 

The  primary  paradigm  in  the  design  of  the  MARUTI  environment  is  that  of  time-driven  compu¬ 
tations.  Development  of  such  an  environment  required  a  re-examination  of  the  basic  assumptions 
and  approaches,  as  the  generalization  of  current  practices  were  not  applicable.  A  comprehensive 
description  of  our  approach  has  been  presented  in  the  book[2], 

2.2  Resource  Allocation 

Clearly  the  resource  management  problem  is  at  the  heart  of  a  successful  implementation  of  a  real¬ 
time  operating  system  in  a  distributed  environment.  Our  studies  of  the  issues  involved  resulted  in 
our  separating  the  resource  management  problem  into  two  phases,  resource  allocation  and  schedul¬ 
ing.  In  our  design,  an  allocator  decides  where  tasks  and  subtasks  are  to  execute.  The  actual  local 
scheduling  of  a  resource  is  ca-ried  out  in  the  second  phase  [2]. 
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In  conjunction  with  the  allocation  of  resources,  we  have  developed  the  concept  of  resource 
verification,  which  is  carried  out  to  ascertain  that  the  scheduling  constraints  will  be  met.  In  this 
way  the  allocation  process  carries  out  its  primary  function  of  assigning  tasks  to  various  nodes, 
taking  into  consideration  the  timing  constraints.  We  have  studied  policy  issues  related  to  the 
resource  allocation[10]. 

2.3  Real-Time  Scheduling 

The  system  maintains  a  calendar  for  each  resource.  If  a  task’s  request  for  a  resource  can  be  satisfied, 
a  reservation  is  made  in  the  calendar.  At  run  time,  resources  are  allocated  to  tasks  according  to 
the  reservations  in  the  calendar. 

In[14],  we  present  a  new  technique  for  scheduling:  decomposition  scheduling.  All  the  requests 
are  decomposed  into  a  sequence  of  subsets.  Each  request  is  in  one  and  only  one  subset.  The 
requests  in  an  earlier  subset  of  the  sequence  are  scheduled  before  the  requests  in  a  later  subset. 
Tasks  within  each  subset  are  scheduled  using  an  approach  called  super-sequence  scheduling[  16,  15]. 

In  determining  the  task  schedules  and  constructing  the  subsets,  we  take  into  account  the  rela¬ 
tionships  which  exist  among  the  time  constraints  of  tasks.  We  have  defined  leading  and  strongly- 
leading  relations,  and  carry  out  the  decomposition  based  on  these  relations. 

The  results  to  date  indicate  that  this  scheduling  approach  guarantees  the  generation  of  a  feasible 
schedule  if  one  exists[3].  At  the  same  time  it  has  relatively  modest  computation  requirements. 

2.4  Fault  Tolerance 

The  MARUTI  system  has  been  built  as  a  fault  tolerant,  distributed  system.  To  achieve  the  fault 
tolerance  objective,  processors  in  the  system  are  divided  into  partitions.  A  real-time  task  can  be 
executed  in  different  partitions  of  processors  at  the  same  time.  The  allocation  of  tasks  to  partitions 
is  dynamically  determined  according  to  system  parameters,  and  according  to  how  many  faults  the 
application  must  tolerate.  The  resource  allocators  in  different  sites  exchange  replica  information 
to  ensure  correct  message  delivery  to  all  replicas.  A  theoretical  model  of  this  scheme  has  been 
presented  in[2]. 

The  fault  tolerance  scheme  follows  a  fork-join  paradigm.  A  message-sending  task  sends  its 
output  message  to  all  the  replicated  message-receiving  tasks.  The  fork  part  of  the  task  takes  care 
of  the  multiple  message  sending,  and  is  transparent  to  the  user.  Each  receiving  task  has  a  user- 
transparent  join  part,  which  selects  the  correct  message,  based  on  time  and  syntax,  and  gives  it 
directly  to  the  message-receiving  task.  We  have  shown  that  this  paradigm  is  applicable  to  handling 
user-definable  resiliency  requirements  on  an  application  by  application  basis[5].  In  addition  it  gives 
flexibility  in  that  a  different  degree  of  resiliency  may  be  specified  for  different  parts  of  a  computation 
graph.  The  approach  permits  the  construction  of  a  resilient  computation  graph,  which  is  capable 
of  restoring  the  degree  of  resiliency  after  a  transient  failure[5,  6]. 

2.5  Programming  Language  Support 

The  time-driven  approach  requires  the  scheduler  to  know  the  resource  requirements,  time  con¬ 
straints,  and  execution  time  of  each  application.  Communication,  precedence  and  synchroniza¬ 
tion  among  processes  affect  the  time  constraints  of  applications,  and  must  be  taken  into  account 
while  scheduling.  Since  these  constraints  and  requirements  are  application-specific,  they  need  to 
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be  derived  from  application  programs.  Therefore,  the  programming  language  has  to  provide  the 
programmer  with  features  to  express  them. 

MPL  (MA.RI/TJ  Programming  Language)[8,  7]  is  based  on  an  object-oriented  paradigm[9).  MPL 
objects  communicate  with  each  other  using  both  one-way  method  invocations  or  remote  procedure 
calls.  It  provides  exception  handling  including  timing  errors.  It  provides  features  to  express  time 
constraints  on  invocations  and  precedence  relations. among  them.  This  information  is  used  for  pre¬ 
scheduling.  MPL  provides  separate  type  hierarchy  and  inheritance  hierarchy.  It  is  possible  to  have 
multiple  implementations  for  a  given  object  specification.  The  MPL  objects  provide  intra-object 
as  well  as  inter-object  concurrency.  It  is  also  possible  to  express  that  certain  actions  have  to  occur 
in  parallel  or  simultaneously.  The  synchronization  mechanism  is  also  designed  to  facilitate  pre¬ 
scheduling.  The  language  supports  fault  tolerance  using  strong  typing,  using  exception  handling, 
and  creating  object  groups.  An  object  group  is  a  mechanism  to  address,  communicate,  and  control 
a  number  of  cooperating  objects. 

Apart  from  translation,  the  MPL  compiler  extracts  the  temporal  and  synchronization  con¬ 
straints  of  objects.  These  are  later  used  by  the  scheduler  to  create  a  calendar. 

2.6  Implementation 

MARUTI  is  built  as  a  modular  system  and  it  allows  the  design,  analysis  and  verification  of  prop¬ 
erties  of  user  applications  executable  in  the  system.  It  is  also  designed  to  be  deterministic  and 
predictable.  The  implementation  is  carried  out  according  to  these  design  goals[4,  11]. 

MARUTI  has  been  demonstrated  as  a  distributed,  real-time,  fault  tolerant  system  in  a  hetero¬ 
geneous  environment.  In  MARUTI  real-time  tasks  and  system  services  are  distributed  among  a  set 
of  processors.  As  a  result,  it  is  not  necessary  to  keep  a  copy  of  each  service  in  each  processor.  The 
local  allocator  dynamically  decides  to  invoke  a  service  on  any  machine.  Furthermore  when  a  local 
service  cannot  meet  all  the  local  requests,  that  is,  the  service  cannot  meet  its  deadline  for  every 
request  from  the  local  tasks,  it  invokes  the  same  service  on  a  remote  machine.  The  remote  service 
coordination  is  carried  out  by  the  allocators  in  local  and  remote  processors,  through  a  process  of 
negotiation. 

The  MARUTI  system  is  designed  as  a  fault  tolerant  system.  We  divide  processors  into  several 
partitions,  such  that  no  fault  propagation  can  take  place  from  one  partition  to  another.  One  copy 
of  a  real-time  application  is  only  run  within  one  partition.  For  the  fault  tolerant  purpose,  multiple 
copies  of  an  application  may  run  at  the  same  time  in  different  partitions.  We  have  implemented 
the  fork-join  mechanism  discussed  above  to  provide  the  fault  tolerance  function. 

The  MARUTI  system  is  designed  as  a  heterogeneous  system.  It  is  implemented  on  different 
machines,  including  Sun-3,  SparcStations,  and  DECStations.  Since  different  machines  have  different 
formats  of  number  storage,  we  are  developing  various  tools  which  can  translate  between  different 
formats  when  communication  is  needed  between  different  machines. 

The  current  implementation  of  MARUTI  runs  on  top  of  the  UNIX[1]  system.  While  UNIX  is 
not  the  most  hospitable  host  to  implement  a  time-driven  system  such  as  MARUTI ,  it  offers  a  very 
effective  system  development  environment.  Further  the  availability  of  the  UNIX  system  on  many 
platforms  makes  MARUTI  portable.  Experience  gained  in  building  MARUTI  on  top  of  UNIX  have 
been  documented  in[ll]. 
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2.7 


Tools 


The  MARUTI  environment  contains  a  set  of  tools  which  have  been  developed  to  support  the 
applications  during  all  phases  of  their  life  cycle.  The  following  tools  are  available  in  the  system  at 
present: 

•  Precompiler.  In  order  to  run  the  real-time  language  we  have  developed,  we  have  built  a 
precompiler  which  can  translate  code  from  our  language  into  C  code. 

•  Joint  Editor.  Currently,  part  of  the  information  contained  in  the  joints,  such  as  execution 
times  of  SAPs  and  their  temporal  relations  with  other  SAPs,  has  to  be  created  and  updated 
manually.  In  order  to  simplify  this  task,  an  interactive  joint  editor  is  provided.  In  the  next 
version,  most  of  this  information  will  be  created  by  the  execution  time  analyzer  and  the 
precompiler. 

•  Scheduling  Tool.  During  the  application  development  it  is  necessary  for  the  programmer  to  get 
some  idea  about  the  ability  of  the  program  to  execute  with  the  necessary  time  constraints.  In 
order  to  support  such  analysis  the  scheduling  tool  permits  a  user  to  study  the  schedulability 
of  a  set  of  tasks  on  a  set  of  system  resources.  The  task  characteristics  are  specied  as  a 
computation  graph  with  the  resource  requirements  for  each  node  of  the  graph  given  explicitly. 
The  tool  then  examines  the  feasibility  of  scheduling  the  tasks  with  the  time  constrains  and 
provides  an  analysis  of  the  resource  bottlenecks  and  the  application  program  bottlenecks.  An 
initial  version  of  this  tool  is  operational. 

•  Calendar  Display.  This  tool  presents  a  dynamic  display  of  the  current  schedule  of  tasks  to 
be  executed.  It  also  supports  a  step  by  step  controlled  execution  of  tasks.  This  tool  and  its 
displays  have  been  very  useful  in  debugging  the  demo  applications  in  that  its  use  has  become 
an  integral  part  of  MARUTI  demos. 

Since  time  is  one  of  the  most  important  factors  in  the  system,  we  have  developed  a  tool  which 
can  stop  the  MARUTI  system  timer.  The  tool  can  also  be  used  to  run  tasks  in  stepwise 
fashion.  That  is,  tasks  can  be  run  one  by  one  when  a  user  selects  a  button  on  the  screen. 

The  MARUTI  system  has  provided  us  a  platform  on  which  to  try  different  ideas  and  to  implement 
different  tools.  We  plan  to  build  more  tools,  such  as  an  automatic  task  execution  time  analyzer. 
This  would  be  run  at  compile  time,  and  would  use  the  syntax  of  the  code  to  determine  the  execution 
time  of  real-time  tasks. 
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